$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa File: 39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa (raw, json) Hash identifier: YYOBk3xV7GEl9AnWxpv4UM346gdbpxkKX1ZVc722+Hg= Subject key identifier: 30:65:3A:28:0A:85:12:C0:33:83:5E:73:8C:8B:4A:73:26:03:07:BE Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584B9E07B77CA47C7799B7953978 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 53508 IP address blocks: 24.89.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b7:7c:a4:7c:77:99:b7:95:39:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=ca1db819-b82e-4cfa-bbc2-8fc0d536743a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:8c:9b:4f:09:5b:7c:79:4a:c2:90:17:a7: 4c:74:6c:e8:07:5d:f3:cb:2d:7a:fe:3f:58:b2:e7: 69:8a:e4:61:b2:95:6f:18:bc:31:7e:05:02:89:3e: 45:c4:88:26:43:a3:44:fe:80:d1:5d:51:40:12:7e: 1f:7e:dd:91:39:cc:15:90:7a:32:c3:67:d2:41:ce: 50:51:59:40:e2:14:28:11:07:80:08:26:da:44:ef: 3b:06:cc:f7:7b:9b:d3:21:5d:e7:f4:40:fe:4a:ec: ff:60:43:a4:90:f6:52:3e:ae:6c:c5:4c:5b:05:ba: 3d:24:4e:1c:8b:51:2f:41:45:7d:50:c6:f0:6d:e3: a1:e4:ab:89:fa:59:92:8d:22:58:e6:af:9e:f3:47: dd:ee:aa:91:87:e1:28:ec:44:8d:a2:8a:af:72:f8: 15:73:f7:71:9d:60:03:95:97:83:5a:84:44:a1:a1: ff:9a:15:6a:d2:4a:b3:d6:28:26:f1:4e:6b:ef:8a: 54:f6:d0:d4:0c:12:54:2d:6d:82:41:ae:2d:86:06: 38:e5:6a:3c:4a:b0:c7:a2:8c:bb:64:2f:12:6d:f2: 4a:56:ec:4c:03:54:79:f7:91:15:56:ba:e4:a7:9b: f3:23:54:b9:34:b1:ea:9f:c5:18:17:e2:ee:d3:00: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:65:3A:28:0A:85:12:C0:33:83:5E:73:8C:8B:4A:73:26:03:07:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:13:2e:e9:d9:7a:66:59:78:98:92:a5:75:f9:25:34:4b:8c: 06:9a:3f:a5:45:5e:aa:cb:fe:07:f9:b8:36:5e:41:ef:55:6f: 84:62:c4:d6:d8:af:6d:d9:b6:ac:2e:15:ca:89:7f:9d:67:52: 99:17:78:86:98:79:31:a4:8c:80:32:bb:29:9b:de:ef:7c:5e: 32:24:4d:60:f5:80:46:c1:bb:e0:17:f3:b8:5c:15:f1:5a:41: 29:1d:e3:1f:e2:ed:58:4c:19:99:f5:95:89:12:39:86:7d:1c: be:bb:82:5a:b8:86:48:ce:bf:eb:6f:ab:b7:41:af:32:3b:6b: 20:a2:27:6e:50:4b:a4:70:ae:7d:1d:ca:d6:30:11:9d:46:87: c1:6d:99:2a:1e:f6:b2:86:ce:bf:9b:66:28:79:2e:1b:c1:c7: 04:f9:62:df:75:ff:45:af:07:aa:14:d0:b2:c7:13:cf:70:53: fb:d1:c2:7d:33:16:e2:0d:2f:68:6a:1a:95:a5:9e:8c:bf:bc: b5:74:9c:4b:23:bf:34:25:95:0a:47:92:9f:cf:33:08:83:35: a8:7e:f5:a9:09:2e:a9:57:d9:71:f6:0d:1b:1e:39:c1:02:37: f2:30:1b:4e:2b:b5:a1:a9:49:f3:b5:38:5d:4c:f7:cc:a5:80: 43:fe:da:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7d8pHx3mbeVOXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Y2ExZGI4MTktYjgyZS00Y2ZhLWJiYzItOGZjMGQ1MzY3NDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4CMm08JW3x5SsKQF6dMdGzoB13zyy16/j9Y sudpiuRhspVvGLwxfgUCiT5FxIgmQ6NE/oDRXVFAEn4fft2ROcwVkHoyw2fSQc5Q UVlA4hQoEQeACCbaRO87Bsz3e5vTIV3n9ED+Suz/YEOkkPZSPq5sxUxbBbo9JE4c i1EvQUV9UMbwbeOh5KuJ+lmSjSJY5q+e80fd7qqRh+Eo7ESNooqvcvgVc/dxnWAD lZeDWoREoaH/mhVq0kqz1igm8U5r74pU9tDUDBJULW2CQa4thgY45Wo8SrDHooy7 ZC8SbfJKVuxMA1R595EVVrrkp5vzI1S5NLHqn8UYF+Lu0wApwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBlOigKhRLAM4Nec4yLSnMmAwe+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzlhM2MzMzUtMzhkNy0z YzgxLWFiNWMtYjQ2ZmZlN2I1YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGFk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIETLunZemZZeJiSpXX5JTRLjAaaP6VFXqrL/gf5uDZeQe9Vb4RixNbY r23ZtqwuFcqJf51nUpkXeIaYeTGkjIAyuymb3u98XjIkTWD1gEbBu+AX87hcFfFa QSkd4x/i7VhMGZn1lYkSOYZ9HL67glq4hkjOv+tvq7dBrzI7ayCiJ25QS6Rwrn0d ytYwEZ1Gh8FtmSoe9rKGzr+bZih5LhvBxwT5Yt91/0WvB6oU0LLHE89wU/vRwn0z FuINL2hqGpWlnoy/vLV0nEsjvzQllQpHkp/PMwiDNah+9akJLqlX2XH2DRseOcEC N/IwG04rtaGpSfO1OF1M98ylgEP+2kM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:37 2025 by rpki-client